How should load balancing and health be designed for production in Ingress?

Define readiness probes, graceful shutdown, connection draining, and controller health metrics. The implementation should be justified by measurable requirements, kept as simple as the problem allows, and validated with realistic tests, telemetry, failure handling, and documented tradeoffs.